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Wellfleet-NAT-MIB DEFINITIONS ::= BEGIN 



IMPORTS 

IpAddress, Counter, Gauge 

FROM RFC1155-SMI 
OBJECT-TYPE 

FROM RFC-1212 
DisplayString 

FROM RFC1213-MIB 
wfNatGroup 

FROM Wellfleet-COMMON-MIB; 

wfNatlfTable OBJECT-TYPE 

SYNTAX SEQUENCE OF WfNatlfEntry 
ACCESS not-accessible 
STATUS mandatory 
DESCRIPTION 

"The set of interface that are participating 

in the NAT protocol.'" 
::= { wfNatGroup 6 } 

WfNatlfEntry OBJECT-TYPE 
SYNTAX WfNatlfEntry 
ACCESS not-accessible 
STATUS mandatory 
DESCRIPTION 

"'An single instance of a NAT interface entry. 
INDEX { wfNatlf IpAddress, 

wfNatlfCircuit } 
::= { wfNatlfTable 1 } 
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WfNatlfEntry ::= SEQUENCE { 
wfNatlfDelete 

INTEGER, 
wfNatlfDisable 

INTEGER, 
wfNatlflpAddress 

IpAddress, 
wfNatlfCircuit 
INTEGER, 
wfNatlfType 
INTEGER, 
wfNatlfState 
INTEGER, 
wfNatlfTxCount 

Counter, 
wfNatlfRxCount 

Counter, 
wfNatlfPktDropCount 

Counter, 
wfNatlfDomain 
DisplayString 
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wfNatlfDelete OBJECT-TYPE 
SYNTAX INTEGER { 
created(1), 
deleted(2) 

} 

ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"This variable determines in a NAT Interface has been 

configured on the router." 
DEFVAL { created } 
::= { wfNatlf Entry 1 } 

wfNatlfDisable OBJECT-TYPE 
SYNTAX INTEGER { 
enabled(1), 
disabled(2) 

} 

ACCESS read-write 

STATUS mandatory 

DESCRIPTION 

"The NAT interface's administrative status. The value 
'enabled' denotes that NAT has been configured 
on the interface. The value 'disabled' denotes that 
the interface is not running NAT.'" 

DEFVAL {enabled} 

::= { wfNatlfEntry 2 } 
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FIG. 
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FIG. 12C 

wfNatlflpAddress OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The IP address of this NAT Interface." 
::= { wfNatlfEntry 3 } 

wfNatlfCircuit OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"The circuit number of this interface." 
::= { wfNatlfEntry 4 } 

wfNatlfType OBJECT-TYPE 
SYNTAX INTEGER { 
uniDirlnbound(l), 
uniDirOutbound(2), 
biDirectional(3) 

} 

ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"Denotes the type of NAT interface being defined." 
DEFVAL{ uniDirlnbound } 
::= { wfNatlfEntry 5 } 
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wfNatlfState OBJECT-TYPE 
SYNTAX INTEGER { 

up(1). 
down(2), 

init(3) 

} 

ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The state of NAT on this interface" 
DEFVAL {down} 
::= { wfNatlfEntry 6 } 

wfNatlfTxCount OBJECT-TYPE 
SYNTAX Counter 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"Number of packets mapped over this interface from 
the local to the global network.'" 
::= { wfNatlfEntry 7 } 
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wfNatlfRxCount OBJECT-TYPE 
SYNTAX Counter 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"Number of packets mapped over this interface from 

the global to the local network.'" 
::= { wfNatlf Entry 8 } 

wfNatlfPktDropCount OBJECT-TYPE 
SYNTAX Counter 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"Number of packets dropped on this interface" 
::= { wfNatlf Entry 9 } 

wfNatlfDomain OBJECT-TYPE 
SYNTAX DisplayString 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"When wfNatlfType is set to biDirectional, specifies 
the Address Domain Name that this interface is 
connected to, otherwise set to null." 
::={ wfNatlf Entry 10} 
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wfNatAddressRangeTable OBJECT-TYPE 

SYNTAX SEQUENCE OF WfNatAddress Range Entry 
ACCESS not-accessible 
STATUS mandatory 
DESCRIPTION 

"Table of address ranges. M 
{ wfNatGroup 8 } 

wfNatAddressRangeEntry OBJECT-TYPE 
SYNTAX WfNatAddressRangeEntry 
ACCESS not-accessible 
STATUS mandatory 
DESCRIPTION 

"Information describing each of the available address ranges." 
INDEX { wfNatAddressRange Address, 
wfNatAddressRangePrefixLen, 
wfNatAddressRangelndex} 
::= { wfNatAddressRangeTable 1 } 

WfNatAddressRangeEntry ::= SEQUENCE { 
wfNatAddressRangeDelete 

INTEGER, 
wfNatAddressRangeDisable 

INTEGER, 
wfNatAddressRangeAddress 

IpAddress, 
wfNatAddressRangePrefixLen 

INTEGER, 
wf N atAdd ress R ange I n dex 

INTEGER, 
wf NatAddressRangeNtol Addr 

IpAddress, 
wfNatAddressRangeType 

INTEGER, 
wfNatAddressRangeDomain 

DisplayString, 
wfNatAddressRangeTransPool 

INTEGER, 
wfNatAddressRangeStaticNextHop 

IpAddress, 
wfNatAddressRangeUnnumCct 
INTEGER 
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FIG. 
12F-1 



FIG. 
12F-2 



FIG. 12F 

wfNatAddressRangeDelete OBJECT-TYPE 
SYNTAX INTEGER { 
created(1), 
deleted(2) 

} 

ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"Create/Delete parameter. Default is created. Users perform 

a set operation on this object in order to create/delete 

an address range entry." 
DEFVAL {created} 
::= { wfNatAddressRange Entry 1 } 

wfNatAddressRangeDisable OBJECT-TYPE 
SYNTAX INTEGER { 
enabled(1), 
disabled(2) 

} 

ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"Enable/Disable parameter. Default is enabled. Users perform 
a set operation on this object in order to enable/disable 
an address range entry." 

DEFVAL {enabled} 

::= { wfNatAddressRangeEntry 2 } 
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wfNatAddressRangeAddress OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The IP beginning address of this range entry." 
::= { wfNatAddressRangeEntry 3 } 

wfNatAddressRangePrefixLen OBJECT-TYPE 
SYNTAX INTEGER (1 .. 32) 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The number of contiguous bits set in the IP address mask 

which are used to define the address range of the entry. 
::= { wfNatAddressRangeEntry 4 } 

wfNatAddressRangelndex OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"A unique value for this entry in wfNatAddressRangeTable." 
::= { wfNatAddressRangeEntry 5 } 
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wfNatAddressRangeNtol Addr OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"When wf NatAddressRangeType is set to srcAddr Filter, 
specifies the N-to-1 translation address used for 
this range, otherwise set to zero." 
DEFVAL { 0 } 

::= { wfNatAddressRangeEntry 6 } 

wfNatAddressRangeType OBJECT-TYPE 
SYNTAX INTEGER { 

sourceAddrFilter(1 ) f 
translationPool(2), 
domainSrcAddrFilter(3), 
domainTransPool (4) 

} 

ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"Denotes the type of address range being defined, 
source AddrFilter: a range of IP addresses used to detect packets 

which need traditional NAT forwarding. 
translationPool: for traditional NAT forwarding, a range of 

IP addresses from which translation addresses are picked. 
domainSrcAddrFilter: a range of IP addresses used to detect domain 

specific packets which need domain specific NAT forwarding. 
domainTransPool: for domain specific NAT forwarding, a range of 
IP addresses from which domain specific translation addresses 
are picked." 
DEFVAL{ sourceAddrFilter } 
::= { wfNatAddressRangeEntry 7 } 

wfNatAddressRangeDomain OBJECT-TYPE 
SYNTAX DisplayString 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"When wfNatAddressRangeType is set to domainSrcAddrFilter or 

domainTransPool, specifies the Address Domain Name that this 
address range is valid for, otherwise set to null." 
::= { wfNatAddressRangeEntry 8 } 
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wfNatAddressRangeTransPool OBJECT-TYPE 
SYNTAX INTEGER { 
inbound(1 ), 
outbound(2) 

) 

ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"This attribute is only valid for the wfNatAddressRangeType as 
domainSrcAddrFilter(3). The value of this attribute decides 
where to get the translation address for this range from. 
This could be either the translation Pool defined for the 
inbound domain or the outbound domain for the packet in 
question." 

DEFVAL{ outbound } 

::= { wfNatAddressRangeEntry 9 } 

wfNatAddressRangeStaticNextHop OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"The IP address of the next hop of this range entry." 
DEFVAL{ 0 } 

::= { wfNatAddressRangeEntry 10 } 

wfNatAddressRangeUnnumCct OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

This Nat Address range over the unnumbered interface." 
DEFVAL{ 0 } 

::= { wfNatAddressRangeEntry 1 1 } 
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wfNatStaticMappingTable OBJECT-TYPE 

SYNTAX SEQUENCE OF WfNatStaticMappingEntry 
ACCESS not-accessible 
STATUS mandatory 
DESCRIPTION 

"'This table creates instances of pre-defined NAT translations. 
::= { wf Nat Group 9 } 

WfNatStaticMappingEntry OBJECT-TYPE 
SYNTAX WfNatStaticMappingEntry 
ACCESS not-accessible 
STATUS mandatory 
DESCRIPTION 

tt A single original source address to translated address 
translation." 
INDEX { wfNatStaticMappingTrans Address, 
wfNatStaticMappingProtocol, 
wfNatStaticMappingTransPort } 
{ wfNatStaticMappingTable 1 } 

WfNatStaticMappingEntry SEQUENCE { 
wfNatStaticMappingDelete 

INTEGER, 
wfNatStaticMappingDisable 

INTEGER, 
wfNatStaticMappingOrigAddress 

IpAddress, 
wfNatStaticMappingTransAddress 

IpAddress, 
wfNatStaticMappingProtocol 

INTEGER, 
wfNatStaticMappingOrigPort 

INTEGER, 
WfNatStaticMappingTransPort 

INTEGER, 
wfNatStaticMapping In Domain 

DisplayString, 
wfNatStaticMappingOutDomain 

DisplayString, 
wfNatStaticMappingStaticNextHop 

IpAddress, 
wfNatStaticMappingUnnumCct 

INTEGER 

} 
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FIG. 
12J-1 



FIG. 
12J-2 



FIG. 12J 

wfNatStaticMappingDelete OBJECT-TYPE 
SYNTAX INTEGER { 
created(1), 
deleted(2) 

} 

ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"Create/Delete parameter. Default is created. Users perform a set 
operation on this object in order to create/delete a static 
address translation entry." 

DEFVAL {created} 

::= { wfNatStaticMappingEntry 1 } 

wfNatStaticMappingDisable OBJECT-TYPE 
SYNTAX INTEGER { 
enabled(1 ), 
disabled(2) 

} 

ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"Enable/Disable parameter. Default is enabled. Users perform a 

set operation on this object in order to enable/disable a static 
address translation entry." 

DEFVAL { enabled } 

::= { wfNatStaticMappingEntry 2 } 



FIG. 12J-1 



28/38 



wf NatStaticMappingOrigAddress OBJ ECT-TYPE 
SYNTAX IpAddress 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"The original (un-translated) address of the translation." 
::= { wfNatStaticMappingEntry 3 } 

wfNatStaticMappingTransAddress OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The translated address of the translation." 
::= { wfNatStaticMappingEntry 4 } 

wfNatStaticMappingProtocol OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The IP protocol of the translation. Example values are 
6 for TCP, and17forUDP." 
::= { wfNatStaticMappingEntry 5 } 
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FIG. 
12K-1 



FIG. 
12K-2 



FIG. 12K 

wfNatStaticMappingOrigPort OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"The original (domain specific) UDP or TCP port of the 

translation. This will only be relevent if the protocol 
is either UDP or TCP." 
::= { wfNatStaticMappingEntry 6 } 

wf NatStaticMappingTransPort OBJ ECT-TYPE 
SYNTAX INTEGER 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The translated UDP or TCP port of the translation. This will 
only be relevent if the protocol is either UDP or TCP." 
::= { wfNatStaticMappingEntry 7 } 

wfNatStaticMappinglnDomain OBJECT-TYPE 
SYNTAX DisplayString 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"This attribute specifies the name of the address domain that this 
source translation shall be valid for. In other words, this 
translation shall only be valid for source addresses coming 
inbound from this domain." 
DEFVAL { "private" } 
::= { wfNatStaticMappingEntry 8 } 
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wfNatStaticMappingOutDomain OBJECT-TYPE 

SYNTAX DisplayString 

ACCESS read-write 

STATUS mandatory 

DESCRIPTION 

"This attribute specifies the name of the outbound address 
domain that this translation will be valid for. In other words, 
this translation only applies to translations that will be 
forwarded out into this address domain. 1 * 
DEFVAL { '•public" } 

::= { wf NatStaticMappingEntry 9} 

wfNatStaticMappingStaticNextHop OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"The IP address of the next hop of this static entry." 
DEFVAL{ 0 } 

::= { wfNatStaticMappingEntry 10 } 
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wfNatStaticMappingUnnumCct OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"This Nat static translation over the unnumbered interface." 
DEFVAL{ 0 } 

::= { wfNatStaticMapping Entry 11} 
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FIG. 
12M-1 



FIG 
12M-2 



FIG. 12M 

wfNatMappingTable OBJECT-TYPE 
SYNTAX SEQUENCE OF WfNatMappingEntry 
ACCESS not-accessible 
STATUS mandatory 
DESCRIPTION 

"This table defines the current set of address translations 
that are in effect." 
::= { wfNatGroup 10 } 

WfNatMappingEntry OBJECT-TYPE 
SYNTAX WfNatMappingEntry 
ACCESS not-accessible 
STATUS mandatory 
DESCRIPTION 

"A single original source address to translated address 
translation." 
INDEX { wfNatMappingTransAddress, 
wf NatMapping Protocol , 
wfNatMappingTransPort } 
::= { wfNatMappingTable 1 } 
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WfNatMappingEntry ::= SEQUENCE { 
wfNatMappingOrigAddress 

IpAddress, 
wfNatMappingTransAddress 

IpAddress, 
wfNatMappingProtocol 

INTEGER, 
wfNatMappingOrigPort 

INTEGER, 
wfNatMappingTransPort 

INTEGER, 
wfNatMappingTxCount 

Counter, 
wfNatMappingRxCount 

Counter, 
wfNatMappingTimeout 

Counter, 
wfNatMappingMode 

INTEGER, 
wfNatMapping In Domain 

DisplayString, 
wfNatMappingOutDomain 
DisplayString 

} 

wfNatMappingOrigAddress OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The original (un-translated) address of the translation." 
::= { WfNatMappingEntry 1 } 
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FIG. 
12N-1 



FIG. 
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FIG. 12N 

wfNatMappingTransAddress OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The translated address of the translation." 
::= { wfNatMappingEntry 2 } 

wfNatMappingProtocol OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"'The IP protocol of the translation."' 
::= { wfNatMappingEntry 3 } 

wfNatMappingOrigPort OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"When the translation is for a TCP connection, this denotes 
the original TCP port number." 
::= { wfNatMappingEntry 4 } 
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wfNatMappingTransPort OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"When the translation is for a TCP connection, this denotes 
the translated TCP port number." 
::= { wfNatMappingEntry 5 } 

wfNatMappingTxCount OBJECT-TYPE 
SYNTAX Counter 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"Number of packets forwarded by NAT using this translation." 
::= { wfNatMappingEntry 6 } 

wfNatMappingRxCount OBJECT-TYPE 
SYNTAX Counter 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"Number of packets received by NAT using this translation." 
::= { wfNatMappingEntry 7 } 
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wfNatMappingTimeout OBJECT-TYPE 
SYNTAX Counter 
ACCESS read-only 
STATUS mandatory FIG. 120 

DESCRIPTION 

"The time in seconds since this translation entry was last used. 
This is used to age out translation entries." 
::= { wfNatMappingEntry 8 } 

wfNatMappingMode OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"This is the bit mask representing the type of this translation. 
Each bit specifies the type as follows: 

The translation could be only ONE of the following three... 

0x01000000 - This translation is origianted on this router, 

i.e. this NAT router performed the translation. 

0x02000000 - This translation is learned from the peer, 

i.e. this translation was learned from the 
peer using NAT Synchronization feature. 

0x04000000 - This translation is owned, 

i.e. it was originally learned from peer, but 
this router received traffic which used this 
translation. 

...and only ONE of the following three. 

0x00000010 - This translation is the STATIC translation. 

0x00000020 - This translation is Dynamic(1 to 1) translation. 

0x00000040 - This translation is N to 1 translation." 
DEFVAL { 0 } 
::= { wfNatMappingEntry 9 } 

FIG 120-1 
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wfNatMappinglnDomain OBJECT-TYPE 
SYNTAX DisplayString 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"This attribute specifies the name of the address domain that this 
source translation shall be valid for. In ther words, this 
translation shall only be valid for source addresses coming 
inbound from this domain." 
::= { wfNatMappingEntry 10 } 



FIG. 120-2 
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